FERPA requires that anyone accessing private student records have
a “legitimate educational interest” in the information.
- Student data may be used only as required for fulfilling officially assigned University responsibilities.
- Student data may be shared among University staff as necessary to carry out those responsibilities; however, do not use email to share student data unless it is encrypted.
- Private information must not be released to third parties outside the University, including parents of students.
All outside parties must contact the Office of Records and Registration to seek release of restricted or non-directory student records.